hi,
try to split your internal net and unse more IPs for nat or
reduce the session timeout.
br
reinhard
** My mobile email is powered by Nokia Mobile Email
solutions **
** please 'reply-to-all' when answering... **
> -----Original Message-----
> From: Mailing list for discussion of Firewall-1 on
behalf of Matheus Valença
> Received: Wed Oct 25 19:13:29 CEST 2006
> To: FW-1-MAILINGLIST AMADEUS.US.CHECKPOINT.COM
> Subject: [FW-1] NAT Hide Failure
>
> Dear CheckPoint Gurus...
>
>
>
> I have a NOKIA IP530 with IPSO 4.1 and CheckPoint R61
installed. This firewall have 19 internal interfaces and 1
external interface with a /28 range of IPs.
>
>
>
> The network of the users and some servers (/22), make
NAT to internet in one IP. Last night, this nat crashed and
all the internet access from this network stopped.
>
>
>
> All others nat (1 to 1 for the web servers) did not
stopped.
>
>
>
> I received this message in the LOG;
>
>
>
> DROP - "message_info: NAT Hide failure - there any
currently no available ports for hide operation"
>
>
>
>
>
> I have no ideas of what could be happening, because the
only solution that I have in that hour (4:00am) was a
reboot. Rsrsrs
>
>
>
> TKS in advance...
>
>
>
> Matheus Valença
> .T..Systems do Brasil
>
>
>
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERV amadeus.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http:
//www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner ts.checkpoint.com
> =================================================
>
>
>
>
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV amadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner ts.checkpoint.com
=================================================
|